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0 Enciphering and deciphering device for high blt-rate transmission systems. 



0 The enciphering device generates an enciphered 
signal (CF) with high bil-rate from the module-2 sum 
of the signal to be transmitted (TR) with a 
pseudorandom sequence of bits (PS) obtained by 
supplying a pseudorandom generator (5) with keys 
renewed at brief time intervals. The keys are in turn 
enciphered and encoded (7. 8) to form an auxiliary 
channel (PC) with low bit-rate which is aligned with 
the enciphered signal (CF) to form frames. 
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Enciphering and deciphering device for high bit-rate transmission systems 



The pres nt invention relates to the field of 
encoding numerical signals and more particularly 
concerns a ciphering and deciphering device for 
high bit-rate transmission systems. 

Modern high-capacity transmission systems 
employ numerical techniques which allow aggrega^ 
tion on the same transmission means (e.g. radio 
link, coaxial cable or optical fiber) of large quantites 
of information of varied nature such as for example 
telephony, telegraphy, data, videoconference. tele- 
vision or any other type of signal which can be 
encoded in numerical form. 

One of the pKJssible requirememnts of the 
transmission system is that it ensure secrecy of the 
information handled and transmitted. This require- 
ment has always been basically important, e.g. in 
the communications of diplomatic missions, while it 
is becoming steadily more important in private use 
systems, in particular for the processing of financial 
or industrial information. 

In general secrecy of the information is pro- 
vided by signai processing called enciphering 
which makes the signal incomprehensible to any- 
one attempting to intercept it and wrongly take 
possession of it. 

The opposite operation, which again makes the 
message clear and is called deciphering, is possi- 
ble only for the legitimate addressee of the in- 
formation who has the deciphering key supplied 
him through a channel considered absolutely safe, 
in general consisting of transportation thereof per- 
formed by an absolutely trustworthy person. 

Numerous enciphering techniques are known 
which however require generally rather complex 
processing performed using dedicated circuits or 
microprocessors. The processing complexity 
makes difficult high bit-rate operation unless par- 
allel processing is carried out with the consequent 
increase in cost and consumption as well as re- 
duced reliability. 

An example of an enciphering system which is 
enjoying wide acceptance for data at not very high 
bit-rates is called DES (Data Encryption Standard) 
conceived by IBM and now adopted as standard by 
the National Bureau of Standards, United States 
Department of Commerce, which describes it for 
example in the publication FIPS PUB 74 dated 1 
April 1981. 'Guidelines for Implementing and Using 
the NBS Data Encryption Standard'. The DES sys- 
tem is also descritDed in the book by A. Sgarro 
'Crittografia - Tecnich di prot zione dei dati riser- 
vati' page 49 and 'foil, published by F. Muzzio in 
1986. 

With reforonco to FIG. 1 there follows th d - 
scription of the circuitry of the enciphering section 
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of an enciphering and deciphering system of 
known type suitable for high bit-rates but with low 
unauthorized deciphering resistance. This encipher- 
ing system is also described in the abovemen- 

5 tioned book by A. Sgarro. 

The enciphering section consists of a memory 
1 with a capacity of N bits in which is entered a 
key word employed for initiallizing a pseudorandom 
generator of N bit word indicated in broken lines 

)0 with reference number 5 in the figure. 

The pseudorandom generator 5 consists of a 
sliding register 2 with N positions synchronized by 
the clock signal CK and fed b>ack by a moduie-2 
adder. The latter consists of an EX-OR gate in- 

15 dicated by reference number 3 in the figures and 
which receives the outputs of two cells of the 
register 2 and whose output is returned to the 
serial input of the register. In the presence of a 
synchronism signal S the key in the memory 1 is 

20 transferred in parallel into the register 2. 

The signal at the output of the sliding register 2 
is still module-2 added to the signal to be transmit- 
ted TR by another EX-OR gate 4 at whose output 
Is obtained the enciphered signal CF to be trans- 

25 mitted. 

In the nonlimiting example shown in FIG. 1 
N = 6 has been selected. It can be shown that if for 
N = 6 the inputs of the EX-OR gate 3 are supplied 
with the outputs of the positions n = 0, 1 of the 

30 register 2 (where n = (0,l,....N-l) and n=0 being 
the output position of the register), there is ob- 
tained a pseudorandom generator with maximum 
period, i.e. capable of generating 2*^ - 1 different 
random words provided the sequence of all logical 

35 zeros is not chosen as the key. 

Pseudo-random generators with maximum pe- 
riod with any value of N and hence sequences of 
random words as long as desired and high bit-rates 
may be obtained. 

40 Th© deciphering section, not shown in the fig- 

ures, is identical with the enciphering section and 
its operation to obtain a deciphered signal DF is 
readily deducible from the properties of the 
module-2 sum. Indeed the two pseudorandom enci- 

45, phering and deciphering generators supply the 
same output signal provided they are initial lized at 
the same instant and with the same key. 

But the enciphering system just described has 
a serious drawback which makes it useless in prac- 

50 tice. It can be proven that, by knowing any one 
message in plaintext and the corresponding enci- 
phered message with a length of 2N bits it is 
possible to find th© key by solving a system of 
equations. 

The above probi ms ar solved by the present 
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invention of an enciphering and deciphering device 
for high-speed transnr)ission systems which, while 
using an enciphering system of the type described 
in RG. 1. calls for changing the keys in the mem- 
ory with high frequency and transmitting them via 
an associated low bit-rate channel in order to en- 
sure synchronism of the entry of the keys in the 
transmitting and receiving terminals. It also calls for 
enciphering the keys themselves to ensure secrecy 
and to use a protection system against bit errors 
entered from the transmission channel. Indeed it is 
evident that the loss of a key involves the loss of 
the received signal until a new key is sent. 

The particular object of the present invention is 
an enciphering and deciphering device for high- 
speed numerical signals including both for enci- 
phering and deciphering a pseudorandom gener- 
ator of sequences of pseudorandom words of N 
bits initiallized with an N bit key, said pseudoran- 
dom words being module-2 added to a signal to be 
enciphered or deciphered, obtaining an enciphered 
or deciphered signal, characterized in that for enci- 
phering it also includes (a) a generator of random 
keys supplied to said pseudorandom generator at a 
first frequency to substitute said N bit key, (b) an 
enciphering circuit of said random keys, (c) a cir- 
cuit for coding the enciphered random key sup- 
plied by said enciphering circuit to the output of 
said coding circuit for channel error correction, 
there being present endphered and encoded ran- 
dom keys, and (d) a multiplexer circuit which or- 
ganizes in a frame at least said enciphered and 
encoded random keys constituting an associated 
channel with low bit-rate, and said enciphered sig- 
nal, obtaining frames of transmission signals. 

Other objects and advantages of the present 
invention will become clear from the detailed de- 
scription below of a noniimiting example of the 
realization thereof and from the annexed drawings 
wherein - 

FIG. 1 shows a block diagram of a known 
enciphering device previously described, 

FIG- 2 shows a block diagram of the enci- 
phering device which is the object of the invention. 

FIG. 3 shows an example of the frame struc- 
ture for the transmission of the enciphered signal. 

FIG. 4 shows an example of the realization 
of the random key generator 6 of RG. 2, and 

FIG. 5 shows a block diagram of the enci- 
phering device which is the object of the invention. 

With reference to FIG. 2, reference numbers 1, 
4 and 5 indicate the same blocks as shown in FIG. 
1. 

Reference number 6 indicates a random key 
generator which, at a clock frequency CKi, gen- 
erates a purely random bit sequence FL supplied 
to the memory 1 and to an enciphering circuit 7. 



At a frequency determined by that of the syn- 
chronism signal S1 the memory l memorizes N 
bits of the sequence FL. then composing purely 
random words of N bits which constitute the keys 

5 supplied to the pseudorandom generator 5. The 
latter as described above with reference to FIG. 1 
generates at a clock frequency CK2 a pseudoran- 
dom bit sequence PS which is added bit by bit in 
the module-2 adder 4 to the transmitter signal TR. 

JO obtaining an enciphered signal CF. 

The enciphering circuit 7 is capable of enci- 
phering the random keys which it receives from the 
generator 6 using another key. It receives from the 
generator 6 the random sequence of bits FL and, 

;5 synchronized by the synchronism signal S2. 
memorizes sections N bits long of said sequence 
interpreting them as keys. Said sections ar th 
same ones memorized in the memory 1 . 

The enciphering circuit 7 may be realized by 

20 conventional techniques, e.g. a structure such as 
that of the above mentioned DES. because the bit- 
rate characteristic of the random keys at its input is 
not high (a few tens of kbit/s maximum) in relation 
to that of the signal to be transmitted TR. 

25 Reference number 8 indicates an encoding cir- 

cuit of the Forward Error Corrector type for corr c- 
tion of channel errors which might be generated in 
the enciphered random keys supplied by the de- 
vice 7. The circuit 8 may be of any known type to 

30 activate for example a convolutional coding with 1/2 
rate and a decoding of the 'hard decision* or 
Viterbi* types, such as for example the one de- 
scribed in the article by J. L. Massey 'The How 
and Why of Channel Coding*, International Zurich 

35 Seminar, 7 March 1984, 

The encoding circuit 8 supplies an output of a 
sequence of bits which constitutes encoded enci- 
phered random words PC- 
Reference number 9 indicates a circuit of 

40 known type which has the function of multiplexing 
by the bit insertion technique the signals to be 
transmitted with a frame alignment word AL gen- 
erated within it and forming the transmission signal 
frames FR. The signals to be transmitted consist of 

45 the high bit-rate enciphered signal CF, the encoded 
and enciphered random words PC and any service 
and/or remote unciphered monitoring channels with 
low bit-rate. 

The frame FR created may have a length on 
50 the order of a thousand bits. It follows that it is also 
necessary to create a synchronism for the entry of 
the words PC. This can be obtained by creating a 
superframe of a length which is a multiple of the 
frame length and a superframe synchronism S3 to 
53 be supplied to th circuit 9. 

Reference number 10 indicates a clock signal 
extractor circuit of known type which takes a clock 
frequency CK from the signal to be transmitted TR 
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which it receives at the input. 

Reference number 1 1 indicates a generator of 
clock and synchronism signals which, on the basis 
of the clock frequency CK. generates the signals 
CK1. CK2, SI, S2 and S3. Realization of the circuit 
11 presents no problem for those skilled in the art 
when the frame and superframe structures, the 
value of N and the various delays introduced from 
the circuits 1 . 5. 7 and 8 have been determined so 
as to correctly align in time the signals at the input 
of the circuit 9. 

FIG, 3 shows an example of a frame structure 
FR made up of the fields AL, which is the frame 
alignment word necessary to permit the decipher- 
ing section to distinguish between the different data 
transmitted, and then the words PC. CS and CF 
defined above. 

FIG. 4 shows an example of the realization of 
the random key generator circuit 6 of FIG. 2. 

Reference number 15 indicates a white-noise 
generator, e.g. consisting of a wide band amplifier, 
whose output is supplied to a band-pass filter 16 at 
whose output is obtained a white noise with limited 
band. 

Reference number 17 indicates a threshhold 
circuit which takes a function which is a sign of the 
white noise with limited band, sampling it at the 
clock frequency CK1 and obtaining the bit stream 
FL. Said bit stream is purely random on the one 
condition that the clock frequency CK1 not be too 
hrgh compared with the maximum output frequency 
of the filter 16. 

FIG. 5 shows an example of a realization of the 
deciphering structure section which is complemen- 
tary to that of ciphering. 

The frames FR are supplied to an auxiliary 
cnannel extraction circuit 20 with a structure com- 
plementary to that of the circuit 9 shown in FIG. 2 
which, being synchronized by the synchronism sig- 
nal 53 , identifies the alignment words AL in the 
frames and separates among them the various 
channels received, supplying to the outputs the 
enciphered signal CF, the encoded and enciphered 
random words PC and the unenciphered service 
and/or remote monitoring channels CS. 

Reference number 21 indicates a corrector cir- 
cuit for the bit errors entered from the transmission 
channel on the bit stream of the words PC which it 
receives from the circuit 20. 

Reference number 22 indicates a deciphering 
device for the decoded words, which it receives 
from the drcuit 21. identified on the basis of the 
synchronism signal S2 . The device 22 outputs the 
random keys FL which were generated by the 
generator 6 of FIG. 2. 

The circuits 21 and 22 have a structure com- 
plementary to that of the circuits 8 and 7 respec- 
tively of FIG. 2. 



Reference numbers 23. 24 and 25 Indicate 
circuits analogous to the memory 1, th pseudoran- 
dom generator 5 and the adder 4 of FIG. 2 respec- 
tively. The circuits 23 and 24 ar© synchronized by 
5 the synchronism signal Si' and clock signal CK2 
respectively. 

The random keys FL are memorized in the 
memory 23 and then supplied to the pseudoran- 
dom generator 24 which supplies to the module-2 
10 adder 25 the pseudorandom signal PS which, ad- 
ded to the enciphered signal CF, supplies at the 
output the deciphered signal DF which Is the same 
as the signal to be transmitted TR of RG.2. 

Thus the known property of the modulo-2 bi- 
J5 nary sum is utilized so that by adding the same 
signal (PS) twice to a binary signal (TR In this 
case), the original signal (TR = DF) is again ob- 
tained. 

Reference numbers 26 and 27 indicate two 

20 circuits with structures analogous to that of the 
clock extractor 10 and of the clock and synchro- 
nism generator 1 1 of FIG. 2 respectively. 

The extractor 26 takes from the stream of the 
input frames FR a clock signal CK' supplied to the 

2S clock and synchronism generator 27 which gen- 
erates the signals CK2', Si'. S2' and S3'. 

Realization of the circuits 26 and 27 does not 
represent a problem for those skilled in the art 
when the structure of the circuits 1 0 and 1 1 of FIG. 

30 2, of the frames and superframes, the value of N 
and the various delays entered from the circuits of 
FIG. 5 are known so as to correctly align in tirne 
the input signals of the adder 25. 

The description given makes clear the advan- 

35 tages of the deciphering device which is the object 
of the present invention. In particular it is possible 
to reach high transmission speeds by using a sim- 
ple encipherir^ circuit structure of the high bit-rate 
signal and at the same time a standard enciphering 

40 structure for the keys transmitted on an auxiliary 
channel with low bit-rate. 

By further enciphering and codifying the keys 
high levels of secrecy and protection against chan- 
nel errors are achieved. 

45 

Claims 

1. Device for enciphering and deciphering nu- 
50 merical signals at high speed comprising both for 
enciphering and deciphering a pseudorandom gen- 
erator (5, 24) of pseudorandom word sequences 
(PS) of N bits initiallized by a key of N bits, said 
pseudorandom words (PS) being module-2 added 
55 to a signal to be enciphered (TR) or deciphered 
(CF), obtaining an enciphered signal (CF) or a 
deciphered signal (DF). characterized in that for 
enciphering it also comprises (a) a generator of 
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random keys supplied to said pseudorandom gen- 
rator at a first frequency to substitute said key of 
N bits, (b) an enciphering circuit of said random 
k ys, (c) a circuit for encoding the enciphered 
random key supplied by said enciphering circuit for 
channel error correction to the output of said cod- 
ing circuit there being present enciphered and en- 
coded random keys, and (d) a multiplexing circuit 
which organizes in a frame at least said enciphered 
and encoded random keys constituting an asso- 
ciated channel with low bit-rate, and said enci- 
phered signal, obtaining transmission signal 
frames. 

2. Enciphering and deciphering device as in 
claim 1 characterized in that said pseudorandom 
generator (5) has maximum period. 

3. Enciphering and deciphering device as in 
claim 1 characterized in that for enciphering said 
multiplexer circuit (9) organizes in said transmis- 
sion signal frames (FR) service and/or remote mon- 
itoring channels (CS) and a frame alignment word 
(AL). 

4. Enciphering and deciphering device as in 
claims i or 3 characterized in that it also com- 
prises circuits (10, 11) for extraction of a clock 
frequency (CK) from said signal to be enciphered 
{TR) and for the generation of synchronism signals 
for said enciphering device. 

5. Enciphering and deciphering device as in 
claim 1 characterized in that said random key 
generator (6) consists of a white noise generator 
with limited band (15. 16) at whose input is con- 
nected a threshold circuit (17) which samples the 
input at a clock frequency (CK1) taking sign func- 
tion of bits in sequence which constitute said ran- 
dom keys (FL). 

6. Enciphering and deciphering device as in 
claim 1 characterized in that for deciphering it also 
comprises (a) a demultiplexer circuit (20) which 
identifies and separates in said transmission signal 
frames (PR) said encoded and enciphered random 
keys (PC) and said enciphered signal (CF). (b) a 
decodifying circuit (21) complementary to said 
codifying circuit (8) for said encoded and enci- 
phered random keys (PC), and (c) a deciphering 
circuit (22) complementary to said enciphering cir- 
cuit which receives the output of said decodifying 
circuit and obtains said random keys (FL) supplied 
to the pseudorandom generator (24). 

7. Enciphering and deciphering device as in 
claims 1 or 6 characterized in that said pseudoran- 
dom generator (5. 24) has maximum period ca- 
pable of generating 2*^-1 different pseudorandom 
words (PS). 

8. Enciphering and deciphering device as in 
claims 1 or 6 characterized in that it also includes a 
first m mory (1. 23) which temporarily memorizes 
said random keys (FL) and supplies them to said 



pseudorandom generator (5, 24) at said first fre- 
quency (Si). 
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0 Enciphering and deciphering device for high bit-rate transmission systems. 



(§) The enciphering device generates an enciphered 
signal (CF) with high bit-rate from the module-2 sum 
of the signal to be transmitted (TR) with a 
pseudorandom sequence of bits (PS) obtained by 
supplying a pseudorandom generator (5) with l^eys 



renewed at brief time intervals. The keys are in turn 
enciphered and encoded (7, 8) to form an auxiliary 
channel (PC) with low bit-rate which is aligned with 
the enciphered signal (CF) to form frames. 
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